Understanding

Access is a way to get and store a user's credentials and build a sustainable authentication flow for payment calls.

AccessToken WorkFlow

This flowchart covers the basic authentication workflow for getting a user's access token.

Token Refresh Workflow

Configure to intercept requests and refresh tokens based on API responses

About tokens

Access Token

An access token is authentication information for user identification that is used when making API calls.

Header

Name	Data Type	Description
typ	String(5)	The type of the token. , These are primarily "JWT".
alg	String(10)	An algorithm used primarily to encrypt tokens.

Payload

Name	Data Type	Description
exp	Int	The expiration date of the token.
iss	String(20)	The token issuer. excoinz.com
iat	Int	The time the token was generated.
sub	String(20)	The client ID that requested this token.
aud	String(20)	The user identifier that this token authenticates to.

Refresh Token

A refresh token is a token whose purpose is to renew the expiration date of an access token. It has a 12-digit randomly generated string.

In order to refresh access tokens, you need to manage refresh tokens in memory or in a database.